Mapping CI/CD Attack Surfaces - Strategies and Insights

Explore attack vector mapping in CI/CD systems through this 40-minute conference talk from GOTO Copenhagen 2023. Gain insights into problem areas, common tripping points, and blind spots in CI/CD security. Learn actionable strategies and tools for improving security, and get a glimpse into the future of CI/CD ecosystems and their evolving approach to reducing attack surfaces. Dive deep into topics such as the definition of CI/CD, attack surface concepts, real-world examples, and practical applications of attack surface mapping. Understand the true threats facing CI/CD systems and how the future may shape security practices in this domain.

Intro
What is CI/CD?
What is an attack surface?
Examples
Application of attack surface mapping
The rest
The real threat
The future
Outro